Static task
static1
Behavioral task
behavioral1
Sample
2b2fcc4a4d45ed1df0a57ff6a2dda5fe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b2fcc4a4d45ed1df0a57ff6a2dda5fe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b2fcc4a4d45ed1df0a57ff6a2dda5fe_JaffaCakes118
-
Size
48KB
-
MD5
2b2fcc4a4d45ed1df0a57ff6a2dda5fe
-
SHA1
5f54a3354fba426a35b4ff0c828abf35b2a1eb5c
-
SHA256
0cc4eedc2d847775cbf8a738eb6109f296a289af054047491777d4a12bf9422e
-
SHA512
5fb431ddae4dca5b01bc355fe1001a8d2cc4610ac4e93d74452624dbcf9c75a4eef1138ce01b93e6cb66d034b79fa56144339d311ccb209c9e470160d271fb8c
-
SSDEEP
768:CxnEWe/v+8JOPKtQa7xG/tfdZ9gu6PVNz+185BozuZR:CxnEWe+8JIPFZBmS87ozk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2fcc4a4d45ed1df0a57ff6a2dda5fe_JaffaCakes118
Files
-
2b2fcc4a4d45ed1df0a57ff6a2dda5fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
60a518164003effceeb9f04f1ea8b1c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
Process32Next
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetVersionExA
HeapFree
HeapAlloc
TerminateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
FlushFileBuffers
GetOEMCP
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
SetPriorityClass
GetCurrentThread
SetThreadPriority
LocalFree
CreateProcessA
ResumeThread
GetCurrentProcess
GetLastError
Sleep
GetProcessHeap
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
user32
wsprintfA
ExitWindowsEx
advapi32
GetNamedSecurityInfoA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegCreateKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
shell32
ShellExecuteA
netapi32
NetUserEnum
NetApiBufferFree
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pep Size: 56B - Virtual size: 56B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ